PT-2026-66671

Successful exploitation of the vulnerability could allow an unauthenticated attacker to exploit a stack-based buffer overflow in the password functionality to conduct code execution when the SafeEnhancement feature is enabled...

PT-2026-66675

Successful exploitation of the vulnerability could allow an authenticated attacker to exploit a stack-based buffer overflow in the upload functionality to conduct code execution...

PT-2026-66833

Name of the Vulnerable Software and Affected Versions NTPsec affected versions not specified Description A buffer overflow occurs in the Zyfer refclock component of NTPsec. This issue allows a local attacker to cause a crash of the ntpd process by triggering a buffer copy without checking the siz...

PT-2026-66875

Name of the Vulnerable Software and Affected Versions TP-Link AXE75 V1 affected versions not specified Description An OS command injection flaw exists in the VPN module. This issue occurs due to improper filtering of special characters, allowing an adjacent, authenticated attacker to execute...

CVE-2026-52371

A Server-Side Request Forgery SSRF in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to scan resources via supplying a crafted HTTP request...

Linux Distros Unpatched Vulnerability : CVE-2026-15722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a...

Qnap QTS and QuTS hero Stack-based Buffer Overflow (CVE-2025-66280)

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the...

Cisco IOS Software IKEv2 Multiple Vulnerabilities (cisco-sa-asa-ftd-ios-dos-DOESHWHy)

According to its self-reported version, Cisco IOS is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to...

The vulnerability of the HTTP-protocol analyzer in Wireshark allows a hacker to induce a service failure.

The vulnerability of the HTTP protocol analyzer used by Wireshark, a tool for analyzing computer network traffic, relates to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the fingerprint recognition function of the 14Finger digital fingerprint collection utility allows a intruder to execute arbitrary code.

The vulnerability of the fingerprint recognition function of the 14Finger digital fingerprint collection utility is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to generate arbitrary codes...

The vulnerability of the UDS protocol analyzer, which is used by Wireshark for analyzing computer network traffic, allows a hacker to cause a service failure.

The vulnerability of the UDS protocol analyzer, a traffic analyzer for computer networks developed by Wireshark, relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the lz4-java data compression library, related to the disclosure of information during data transmission, allows attackers to disclose protected information.

The vulnerability of the lz4-java data compression library is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-63035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attacker to cause a denial of service or...

Erlang/OTP 17.0 < 27.3.4.15 / 28.0 < 28.5.0.4 / 29.0 < 29.0.4 Multiple Vulnerabilities

The version of Erlang/OTP installed on the remote host is 17.0 prior to 27.3.4.15, 28.0 prior to 28.5.0.4, or 29.0 prior to 29.0.4. It is, therefore, affected by multiple vulnerabilities: - The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by th...

PT-2026-66686

The miniOrange 2FA WordPress plugin before 6.2.6 does not validate the submitted one-time password against the targeted user's stored secret, instead verifying it against an attacker-supplied value, allowing an unauthenticated attacker who knows a victim's password to bypass two-factor...

PT-2026-66733

The HTTP server component of ANDRITZ HIPASE-250 formerly 250 SCALA in affected versions exposes an undocumented endpoint that changes the server's logging level and target without requiring authentication. A remote, unauthenticated attacker with network access to the service may suppress audit...

PT-2026-66668

A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument injection vulnerability in the APT backend. This allows specially crafted package names, which begin with a hyphen, to be misinterpreted as command options by apt-ge...

The vulnerability of the bond_header_parse() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bondheaderparse function in the Linux operating system’s kernel is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the atmio16d_attach() function in the drivers/comedi/drivers/ni_atmio16d.c module allows a remote attacker to cause a service failure for Linux operating system device drivers.

The vulnerability of the atmio16dattach function in the drivers/comedi/drivers/niatmio16d.c module relates to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the `dev_energymodel_nl_get_perf_domains_doit()` function in the kernel/power/em_netlink.c file of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the devenergymodelnlgetperfdomainsdoit function in the kernel/power/emnetlink.c file of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...